Description
Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.
References
- JR49200 vendor-advisory
- 66154 vdb-entry
- JR48815 vendor-advisory
- JR49206 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21666684
- ibm-infosphere-cve20134057-csrf(86546) vdb-entry